Anonymous
2026-10-30 09:28:47
UTC ·
(2 weeks ago)
FortiWeb WAF: 40 attacks detected. Threat Score: 5400. Types: Client Management(20), GEO IP(20). Origin: Singapore.
Web App Attack
🇷🇺
russian-kurort.ru
2026-10-30 08:51:00
UTC ·
(2 weeks ago)
SYN flood
DDoS Attack
Hacking
🇺🇸
1gz
2026-10-30 04:18:27
UTC ·
(2 weeks ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /kosove/pas-zgjedhjeve-ne-serbi-kuci-humbja-e-vuciqit-mund-te-shenoje-fundin-e-destabilizimit/1073454/amp/
UA: Mozilla/5.0 (Windows NT 10 ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /kosove/pas-zgjedhjeve-ne-serbi-kuci-humbja-e-vuciqit-mund-te-shenoje-fundin-e-destabilizimit/1073454/amp/
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇩🇪
on-com
2026-10-30 02:37:30
UTC ·
(2 weeks ago)
URL scan
Brute-Force
Web App Attack
🇺🇸
1gz
2026-10-30 00:45:10
UTC ·
(2 weeks ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /english/100-police-officers-outside-the-prime-ministers-office-metal-benches-used-as-a-barrier-near-the-protest-podium-confiscated/90019 ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /english/100-police-officers-outside-the-prime-ministers-office-metal-benches-used-as-a-barrier-near-the-protest-podium-confiscated/900192/amp/
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
1gz
2026-10-29 07:15:13
UTC ·
(2 weeks ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /teknologji/auto/inteligjenca-artificiale-po-transformon-proceset-e-zhvillimit-te-mercedes-benz/1070505/
UA: Mozilla/5.0 (Windows NT 10.0 ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /teknologji/auto/inteligjenca-artificiale-po-transformon-proceset-e-zhvillimit-te-mercedes-benz/1070505/
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 Edg/135.0.0.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇫🇮
pavel Karpenko
2026-10-29 06:24:10
UTC ·
(2 weeks ago)
47.79.13.116 - - [29/Oct/2026:09:24:10 +0300] "GET /legacy/netname.php?netname=EMO&lang=es HTTP/1.1" 404 218 "https://ultralir.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" cli ...
show more
47.79.13.116 - - [29/Oct/2026:09:24:10 +0300] "GET /legacy/netname.php?netname=EMO&lang=es HTTP/1.1" 404 218 "https://ultralir.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" client_port=45712 server_port=443 rt=0.000 urt=- transfer_entry=- server_addr=195.133.18.6 epoch=1793255050.165
show less
DDoS Attack
🇩🇪
FeG Deutschland
2026-10-29 02:38:13
UTC ·
(2 weeks ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 28
Exploited Host
Web App Attack
🇺🇸
1gz
2026-10-29 02:08:28
UTC ·
(2 weeks ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /english/young-protesters-revolt-balluku-has-stolen-over-e300-million-she-must-be-arrested-the-broken-windows-can-be-replaced-with-just-o ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /english/young-protesters-revolt-balluku-has-stolen-over-e300-million-she-must-be-arrested-the-broken-windows-can-be-replaced-with-just-one-of-her-villas/1071463/amp/
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇩🇪
FeG Deutschland
2026-09-23 05:04:05
UTC ·
(1 month ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 28
Exploited Host
Web App Attack
🇩🇪
jbcrn
2026-09-23 04:43:33
UTC ·
(1 month ago)
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. Requested honeypot path: /fediverse/post/deflagration.hemiplegia/substantiality/destinate/hacklog/. User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS ...
show more
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. Requested honeypot path: /fediverse/post/deflagration.hemiplegia/substantiality/destinate/hacklog/. User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15
show less
Bad Web Bot
Web App Attack
🇩🇪
ghostwarriors
2026-09-22 19:20:09
UTC ·
(1 month ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
Anonymous
2026-09-22 19:06:51
UTC ·
(1 month ago)
Fail2Ban triggered
Web App Attack
🇩🇪
LRob
2026-09-21 21:21:19
UTC ·
(1 month ago)
This address requests our sites over plain http, is answered with a redirect to https, and never follows it — over and over. A browser follows redirects; a scanner enumerating hosts does not. It reads nothing it asks for and only loads the server; bl ...
show more
This address requests our sites over plain http, is answered with a redirect to https, and never follows it — over and over. A browser follows redirects; a scanner enumerating hosts does not. It reads nothing it asks for and only loads the server; blocked. Please check what runs on this address. | method: GET | path: /sitemap-index.xml.gz | 2026-09-21 21:21 UTC
show less
Bad Web Bot
🇩🇪
jbcrn
2026-09-18 13:15:36
UTC ·
(1 month ago)
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. Requested honeypot path: /fediverse/post/deflagration.ochreous/sextolet/overexquisitely/. User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) Apple ...
show more
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. Requested honeypot path: /fediverse/post/deflagration.ochreous/sextolet/overexquisitely/. User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 Edg/135.0.0.0
show less
Bad Web Bot
Web App Attack